Beveiligingsadvies

CVE-2026-85212

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-03 14:12:23

Laatst bijgewerkt 2026-09-03 17:23:19

Toegewezen door VulnCheck

CVSS-score 8.7

Status PUBLISHED

Beschrijving

CRMEB contains an authentication bypass vulnerability in the verifyAuth() method of SystemRoleServices.php that returns true from both conditional branches. Sub-administrators and accounts with no roles can access restricted admin endpoints by exploiting the inert role check that always permits requests.

← Alle CVE's bekijken Bekijk op cve.org ↗